6.5
Medium
CVE-2023-0666 Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and…
Description
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wireshark 4.0 | 4.0.0 → 4.0.5 | 4.0.6 |
References
- takeonme.org takeonme.org
- gitlab.com gitlab.com
- www.wireshark.org www.wireshark.org
- www.wireshark.org www.wireshark.org
- www.debian.org www.debian.org
- security.gentoo.org security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of Wireshark
The 185 CVEs of Wireshark →
CVE-2026-95391
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95389
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
8.1
High
CVE-2026-95386
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95390
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium